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INTHECLAIMS 
Please Amend THE Claims AS FOLLOWS: 

1. (currentiy amended) An apparatus for providing information in response to a qu^ 
of a virtual database table^ the apparatus comprising: 

a virtual database sd^ce compiising tiie virtual database table, wherein the 

virtual database table comprises one or more rows and each of the one or 
more rows comprises one or more fields; and 
an information soiirce comprising the information to be provided in response to 
the query of the virhial database table, wherein the information source 

comprises an access evaluator configured to determine whether a user 
may have access to an inf omiation resource within the information 
source, ftie query comprising a field name and an indication of manner 
for selecting a row, and wbereii\ the virtual database service is configured 
to: 

receive the query; 

respond to the field name and the indication of the manner for 

selecting a row as required to obtain the inf ormatipn to be 
provided from the information soiirce; and 

provide the information as a value of the field indicated by th6 
field name in tihe selected row, in response to the query, 

2. (previously presented) The apparatus of claim 1> wherein the indication of the 
manner of selecting a row comprises a selection value and the information source 
provides at least one component of the information to be provided in response to a 
match between the selection value and a pattern fliat matches a plurality of values and is 
accessible to the information sotirce. 
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3. (previously presented) The apparatus of daim 1, wherein: 

the query is an SQL query addressing the virtual database table; 
the field naine is contained in a SELECT claiise in the query; and 
ttie indication of the manner of selecting a row is contained in a WHERE clause 
inthequeiy.. 

4. (previously presented) The apparatus of claim I, wherein the manner of selecting a 
row comprises information identifying tfie information resource within tiie information 
source and the user seeking access to the information resource; and the provided 
infomiation in response to the query comprises an indication of whether the identified 
user may access the information resource. 

5. (previously presented) The apparatus of claim 4, wherein the access evaluator 
detetmihes whether the user may have access to the informatipn resource by 
considering one or moire access poUcies, each access policy indicating whether a user 
group may have access to a set of informaHon resources, the access evaluator configured 
to allow access by the user to the information resource when the one or more access 
policies for the user groups to which the user belongs permit access to the sets of. 
information resources to which the information resource belongs and the manner of 
selecting a row comprises membership information about the u^er from which 
membership of the user in a user group may be determined. 

6. (previously pr^erited) The apparatus of claim 5, vyherein the access evaluator uses 
the membership information to determine membership of the user in a user group. . 
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7. (previously presented) The apparatus of daim 6, wherein: 

the access evaluator determines that the user's membership in the user group 
permits the tiser access to the information resource; and 

the provided information in response to the query further indicates a.meti\od of 
providing further information about the user in a further query from 
which the user's membership in a user group can be determined. 

8. (previously presented) . The apparatus of claim 7, wherein the furtfier information 
comprises authentication information that may be used to validate the user's identity. 

9. (previomly presented) The apparatus of claim 8, further comprising an additional 
information soiirce configured for use as an authenticator, wherein the authentication 
information is used to validate the user's identity. 

10. (previously presented) Theapparahis of claim 9/wherein a response to the further 
query provides an indication whether the user's identity is valid with regard to 
accessing an inforciiation resource. 

11. (previously presented) The apparatus of claim 5, further comprising an additional 
infoniiation source configured for use as a user profUe information source that provides 
addilional infonnation about the user, yvrherein the additional information about the 
user comprises a user information retrieval method specification that specifies how the 
user profile information source provides the additional information, and wherein Ihe 

access evaluator coTisiders at least some portion of the additional information to 
deterrmne membership of the user in the user group. 
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12. (previously presented) The apparatus of daim 5, further comprising an additional 
information source configured for use as an auflienticator fliat validates the identity of 
the user Arough use of the membership information, wherein the access evaluator 
determines membership of the user in a user group only after the aulhenticator has 
validated the user's identity. 

13. (previously presented) The apparatus of daim 4, further comprising an additional 
informationsourcecohfigured foruse asan authenticalor lhatvaiidates an identity of 
tiie user through the use oif authentication information in the indication of a manner of 
selecting a row, wherein the provided information in response to the query is obtained 
at least in part from the authenticator, the provided information comprising an 
indication of whether the user's identity is valid. 

14. (previously presented) The apparatus of daim 4^ further comprising an additional 
information source configiired for use as a user profile information source that provides 
additional information about the user through the use of profile Information gathering 
information that indicates to the profile information source how to gather the profile 

n^o™atioiv wherein the indication of the manner for s«decting a row comprises the 
profile information gatheriitg information, wherein the provided information in 
response to the query is obtained at least in part from the profile infonnation source, the 
provided information comprising the profile information. 
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